Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/g9UgZbe7WNwsu6X5u0Yp84MSpYc.roa
File: g9UgZbe7WNwsu6X5u0Yp84MSpYc.roa (raw, json)
Hash identifier: DuLh5Pds/RH907Y4bK1YrPzknbVUqi2FGQ8g/3h86lg=
Subject key identifier: 83:D5:20:65:B7:BB:58:DC:2C:BB:A5:F9:BB:46:29:F3:83:12:A5:87
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0190646C02F4ADACA8FE61CAFF08F70780A3
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/g9UgZbe7WNwsu6X5u0Yp84MSpYc.roa
Signing time: Sat 29 Jun 2024 14:35:18 +0000
ROA not before: Sat 29 Jun 2024 14:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41452
IP address blocks: 89.164.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:6c:02:f4:ad:ac:a8:fe:61:ca:ff:08:f7:07:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 29 14:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83d52065b7bb58dc2cbba5f9bb4629f38312a587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:df:94:b0:5d:03:a1:cd:a7:5d:ef:87:37:
39:1d:96:fb:06:4e:4c:00:13:95:32:2e:88:05:e0:
9a:f5:07:c5:cc:17:b5:aa:84:5b:28:31:83:ed:e6:
12:0f:5d:e9:18:a5:7c:c6:bf:37:8c:b2:0c:2f:5a:
f0:4b:a9:fe:a1:23:7a:76:d3:6d:35:31:c7:8d:4d:
76:15:7c:4c:08:0b:4c:2c:49:9f:6b:0e:b1:8f:76:
84:66:2c:c3:11:15:d6:18:9f:d3:65:58:90:29:8b:
c2:9c:74:8f:2f:f8:17:4f:f6:4d:d4:17:49:f6:16:
ce:3f:62:87:9f:90:4f:2e:c4:e5:74:e5:76:42:a8:
92:f0:12:d6:ac:72:80:c6:16:94:e7:70:88:77:b4:
6c:db:03:2c:3a:fc:ba:b2:03:aa:a8:55:74:91:c0:
8f:03:36:b9:d5:d0:57:83:f8:6a:8d:38:3b:24:06:
e1:f6:b7:b8:a9:4f:bf:c2:fb:ac:2e:aa:cf:a3:68:
2e:d8:bd:a2:d0:d4:26:91:25:4a:de:36:63:10:e7:
e8:77:f2:a2:4e:bf:af:6a:f5:d1:8e:1c:1a:12:ae:
40:5d:76:62:be:f8:0f:32:61:51:d2:42:a1:b3:e6:
ed:6b:68:08:da:ce:24:86:36:04:44:91:c4:0b:7a:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:20:65:B7:BB:58:DC:2C:BB:A5:F9:BB:46:29:F3:83:12:A5:87
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/g9UgZbe7WNwsu6X5u0Yp84MSpYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.164.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d1:7f:5c:cc:c8:43:e5:44:38:b3:4b:a9:97:d1:0d:b7:cc:
c4:6d:de:0a:08:d0:46:00:8b:e1:a7:97:31:e9:2c:18:10:c4:
68:10:b6:3e:43:be:08:c7:29:d0:00:17:4d:1f:d8:33:09:4d:
86:88:3e:26:6a:1c:98:39:b6:84:93:62:a1:c9:bc:3d:19:8b:
17:d0:c5:6b:87:f9:2c:97:73:42:17:b2:b3:39:47:28:c1:4e:
1d:8e:e5:98:97:98:ee:08:b2:ea:08:41:6b:49:c5:7e:0f:c3:
61:d0:ed:13:88:03:e4:63:04:13:e7:df:5f:6d:b1:fb:88:ef:
6a:6c:2b:09:e4:75:70:1f:87:ca:92:f2:4c:62:91:18:92:8b:
be:18:c9:2e:a1:3f:73:e1:82:49:67:1e:8a:1d:2e:c5:30:a9:
00:8f:61:5b:73:16:c1:11:cc:eb:67:33:11:2a:81:59:f6:63:
ec:15:44:0c:bb:28:ad:62:ec:69:66:9b:5c:57:dd:c6:80:42:
79:f6:ea:e5:e2:d5:9d:75:c5:6c:e1:96:a5:f6:c7:c6:02:c5:
d2:43:da:fa:b1:9a:e2:cd:f8:11:a2:70:fa:21:b5:51:4d:7a:
73:83:58:88:12:53:42:00:d1:97:3b:11:c1:d8:b5:ea:15:bc:
a0:b9:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:41:30 2024 by rpki-client on console-fra.rpki-client.org